t. [ 7.277132] systemd[1]: Initializing machine ID from VM UUID. [ 7.522766] SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). [ 10.495446] systemd[1]: Populated /etc with preset unit settings. [ 10.685539] systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. [ 10.690037] systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. [ 10.753276] systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. [ 10.771598] systemd[1]: Queued start job for default target multi-user.target. [ 10.773850] systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. [ 10.784871] systemd[1]: Created slice system-addon\x2dconfig.slice. [ 10.788045] systemd[1]: Created slice system-addon\x2drun.slice. [ 10.791157] systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. [ 10.794625] systemd[1]: Created slice system-getty.slice. [ 10.797587] systemd[1]: Created slice system-modprobe.slice. [ 10.800575] systemd[1]: Created slice system-serial\x2dgetty.slice. [ 10.803667] systemd[1]: Created slice system-system\x2dcloudinit.slice. [ 10.806854] systemd[1]: Created slice system-systemd\x2dfsck.slice. [ 10.809863] systemd[1]: Created slice user.slice. [ 10.812163] systemd[1]: Started systemd-ask-password-console.path. [ 10.814762] systemd[1]: Started systemd-ask-password-wall.path. [ 10.817555] systemd[1]: Set up automount boot.automount. [ 10.820080] systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. [ 10.822813] systemd[1]: Reached target integritysetup.target. [ 10.825233] systemd[1]: Reached target remote-cryptsetup.target. [ 10.827709] systemd[1]: Reached target remote-fs.target. [ 10.829985] systemd[1]: Reached target slices.target. [ 10.832196] systemd[1]: Reached target swap.target. [ 10.834375] systemd[1]: Reached target torcx.target. [ 10.836635] systemd[1]: Reached target veritysetup.target. [ 10.840720] systemd[1]: Listening on systemd-coredump.socket. [ 10.843152] systemd[1]: Listening on systemd-initctl.socket. [ 10.845973] systemd[1]: Listening on systemd-journald-audit.socket. [ 10.848669] systemd[1]: Listening on systemd-journald-dev-log.socket. [ 10.851413] systemd[1]: Listening on systemd-journald.socket. [ 10.853988] systemd[1]: Listening on systemd-networkd.socket. [ 10.856632] systemd[1]: Listening on systemd-udevd-control.socket. [ 10.859102] systemd[1]: Listening on systemd-udevd-kernel.socket. [ 10.861667] systemd[1]: Listening on systemd-userdbd.socket. [ 10.865267] systemd[1]: Mounting dev-hugepages.mount... [ 10.870002] systemd[1]: Mounting dev-mqueue.mount... [ 10.875757] systemd[1]: Mounting media.mount... [ 10.878800] systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 10.885119] systemd[1]: Mounting sys-kernel-debug.mount... [ 10.890150] systemd[1]: Mounting sys-kernel-tracing.mount... [ 10.899491] systemd[1]: Mounting tmp.mount... [ 10.909909] systemd[1]: Starting flatcar-tmpfiles.service... [ 10.913755] systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. [ 10.919825] systemd[1]: Starting kmod-static-nodes.service... [ 10.925165] systemd[1]: Starting modprobe@configfs.service... [ 10.931286] systemd[1]: Starting modprobe@dm_mod.service... [ 10.938534] systemd[1]: Starting modprobe@drm.service... [ 10.943999] systemd[1]: Starting modprobe@efi_pstore.service... [ 10.949052] systemd[1]: Starting modprobe@fuse.service... [ 10.956128] systemd[1]: Starting modprobe@loop.service... [ 10.966180] systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). [ 10.971494] systemd[1]: systemd-journald.service: unit configures an IP firewall, but the local system does not support BPF/cgroup firewalling. [ 10.975991] systemd[1]: (This warning is only shown for the first unit using IP firewalling.) [ 10.980643] systemd[1]: Starting systemd-journald.service... [ 11.005971] systemd[1]: Starting systemd-modules-load.service... [ 11.011412] systemd[1]: Starting systemd-network-generator.service... [ 11.018811] systemd[1]: Starting systemd-remount-fs.service... [ 11.028191] systemd[1]: Starting systemd-udev-trigger.service... [ 11.034494] systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 11.047727] systemd[1]: Mounted dev-hugepages.mount. [ 11.051698] fuse: init (API version 7.34) [ 11.054476] systemd[1]: Mounted dev-mqueue.mount. [ 11.057908] systemd[1]: Mounted media.mount. [ 11.061666] systemd[1]: Mounted sys-kernel-debug.mount. [ 11.066585] systemd[1]: Mounted sys-kernel-tracing.mount. [ 11.070278] kauditd_printk_skb: 51 callbacks suppressed [ 11.070281] audit: type=1305 audit(1755046613.982:91): op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 [ 11.078762] audit: type=1300 audit(1755046613.982:91): arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7fff6190c8c0 a2=4000 a3=7fff6190c95c items=0 ppid=1 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) [ 11.078768] audit: type=1327 audit(1755046613.982:91): proctitle="/usr/lib/systemd/systemd-journald" [ 11.080306] loop: module loaded [ 11.099730] systemd[1]: Started systemd-journald.service. [ 11.104764] audit: type=1130 audit(1755046614.017:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.118857] audit: type=1130 audit(1755046614.028:93): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.118863] audit: type=1130 audit(1755046614.030:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.118867] audit: type=1131 audit(1755046614.030:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.144306] audit: type=1130 audit(1755046614.056:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.151029] audit: type=1131 audit(1755046614.056:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.161573] audit: type=1130 audit(1755046614.074:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.259486] systemd-journald[1426]: Received client request to flush runtime journal. [ 12.122066] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 [ 12.132370] ACPI: button: Power Button [PWRF] [ 12.134553] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 [ 12.168641] ACPI: button: Sleep Button [SLPF] [ 12.228619] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 12.243015] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 12.243851] input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 [ 12.257817] mousedev: PS/2 mouse device common for all mice [ 12.593365] loop0: detected capacity change from 0 to 221472 [ 12.741879] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 12.763142] loop1: detected capacity change from 0 to 221472 [ 13.800292] EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks [ 13.871015] EXT4-fs (nvme0n1p9): resized filesystem to 1489915 2025/08/13 00:56:58Z: Amazon SSM Agent v2.3.1319.0 is running 2025/08/13 00:56:58Z: OsProductName: Flatcar Container Linux by Kinvolk 2025/08/13 00:56:58Z: OsVersion: 3510.3.8 This is ip-172-31-30-94 (Linux x86_64 5.15.189-flatcar) 00:57:01 SSH host key: SHA256:JawrcqmkafF7TQ+oTPT1EztmEpvT1L5YIprsJTzGa54 (ED25519) SSH host key: SHA256:QRwnnU7QVt5UYr7IFmtdTAVv/hu+HNzjA3EYb7vul7g (ECDSA) SSH host key: SHA256:4tZ72U8wo05aY4xk0Cgst0PWbdqOQkLEtzV5ed87YcY (RSA) eth0: 172.31.30.94 fe80::4c2:16ff:fe50:6e63 ip-172-31-30-94 login: [ 28.373846] kauditd_printk_skb: 177 callbacks suppressed [ 28.373850] audit: type=1305 audit(1755046631.880:161): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 28.381312] audit: type=1300 audit(1755046631.880:161): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff5781ebd0 a2=420 a3=0 items=0 ppid=1 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 28.391139] audit: type=1327 audit(1755046631.880:161): proctitle=2F7362696E2F617564697463746C002D44 [ 28.394607] audit: type=1131 audit(1755046631.882:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 28.418136] audit: type=1130 audit(1755046631.922:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 28.425129] audit: type=1106 audit(1755046631.923:164): pid=2101 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 28.432513] audit: type=1104 audit(1755046631.923:165): pid=2101 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 28.441497] audit: type=1106 audit(1755046631.947:166): pid=2097 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 28.451315] audit: type=1104 audit(1755046631.948:167): pid=2097 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 28.459059] audit: type=1131 audit(1755046631.950:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.94:22-147.75.109.163:36700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 29.099720] Initializing XFRM netlink socket This is ip-172-31-30-94 (Linux x86_64 5.15.189-flatcar) 00:57:13 SSH host key: SHA256:JawrcqmkafF7TQ+oTPT1EztmEpvT1L5YIprsJTzGa54 (ED25519) SSH host key: SHA256:QRwnnU7QVt5UYr7IFmtdTAVv/hu+HNzjA3EYb7vul7g (ECDSA) SSH host key: SHA256:4tZ72U8wo05aY4xk0Cgst0PWbdqOQkLEtzV5ed87YcY (RSA) eth0: 172.31.30.94 fe80::4c2:16ff:fe50:6e63 ip-172-31-30-94 login: [ 39.541915] kauditd_printk_skb: 88 callbacks suppressed [ 39.541919] audit: type=1130 audit(1755046643.048:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.550361] audit: type=1131 audit(1755046643.048:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.820492] audit: type=1130 audit(1755046643.326:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.904123] audit: type=1131 audit(1755046643.410:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 44.433366] audit: type=1131 audit(1755046647.939:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.391450] audit: type=1130 audit(1755046650.897:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.398124] audit: type=1131 audit(1755046650.897:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.848124] audit: type=1130 audit(1755046651.354:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 48.434594] audit: type=1130 audit(1755046651.941:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 49.104715] audit: type=1400 audit(1755046652.611:216): avc: denied { mac_admin } for pid=2418 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 49.112251] audit: type=1401 audit(1755046652.611:216): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 49.119707] audit: type=1300 audit(1755046652.611:216): arch=c000003e syscall=188 success=no exit=-22 a0=c000b3e1b0 a1=c0009bb998 a2=c000b3e180 a3=25 items=0 ppid=1 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 49.132368] audit: type=1327 audit(1755046652.611:216): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 49.145524] audit: type=1400 audit(1755046652.611:217): avc: denied { mac_admin } for pid=2418 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 49.155209] audit: type=1401 audit(1755046652.611:217): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 55.791443] kauditd_printk_skb: 42 callbacks suppressed [ 55.791446] audit: type=1131 audit(1755046659.298:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.233098] audit: type=1130 audit(1755046660.738:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.453511] audit: type=1400 audit(1755046660.960:233): avc: denied { mac_admin } for pid=2774 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.465623] audit: type=1401 audit(1755046660.960:233): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 57.475316] audit: type=1300 audit(1755046660.960:233): arch=c000003e syscall=188 success=no exit=-22 a0=c000bc80f0 a1=c000bca3d8 a2=c000bc80c0 a3=25 items=0 ppid=1 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 57.496422] audit: type=1327 audit(1755046660.960:233): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 57.508943] audit: type=1400 audit(1755046660.960:234): avc: denied { mac_admin } for pid=2774 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.520414] audit: type=1401 audit(1755046660.960:234): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 57.527220] audit: type=1300 audit(1755046660.960:234): arch=c000003e syscall=188 success=no exit=-22 a0=c0008a9f00 a1=c000bca3f0 a2=c000bc8180 a3=25 items=0 ppid=1 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 57.539612] audit: type=1327 audit(1755046660.960:234): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 63.385923] kauditd_printk_skb: 4 callbacks suppressed [ 63.385926] audit: type=1325 audit(1755046666.892:236): table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 63.395319] audit: type=1300 audit(1755046666.892:236): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe3c187800 a2=0 a3=7ffe3c1877ec items=0 ppid=3057 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 63.406047] audit: type=1327 audit(1755046666.892:236): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 63.411644] audit: type=1325 audit(1755046666.892:237): table=nat:39 family=2 entries=1 op=nft_register_chain pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 63.416968] audit: type=1300 audit(1755046666.892:237): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf2bf2e40 a2=0 a3=7ffdf2bf2e2c items=0 ppid=3057 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 63.429088] audit: type=1327 audit(1755046666.892:237): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 63.434650] audit: type=1325 audit(1755046666.895:238): table=filter:40 family=2 entries=1 op=nft_register_chain pid=3109 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 63.439594] audit: type=1300 audit(1755046666.895:238): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc77b84340 a2=0 a3=7ffc77b8432c items=0 ppid=3057 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 63.449511] audit: type=1327 audit(1755046666.895:238): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 [ 63.454394] audit: type=1325 audit(1755046666.895:239): table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3110 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 73.328264] kauditd_printk_skb: 143 callbacks suppressed [ 73.328268] audit: type=1106 audit(1755046676.834:287): pid=2134 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 73.349563] audit: type=1104 audit(1755046676.834:288): pid=2134 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 73.376947] audit: type=1106 audit(1755046676.883:289): pid=2130 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 73.395769] audit: type=1104 audit(1755046676.894:290): pid=2130 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 73.416367] audit: type=1131 audit(1755046676.897:291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.94:22-147.75.109.163:36714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 75.176217] audit: type=1325 audit(1755046678.682:292): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3330 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 75.185434] audit: type=1300 audit(1755046678.682:292): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd62020ee0 a2=0 a3=7ffd62020ecc items=0 ppid=3057 pid=3330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 75.211360] audit: type=1327 audit(1755046678.682:292): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 75.218137] audit: type=1325 audit(1755046678.692:293): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3330 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 75.231373] audit: type=1300 audit(1755046678.692:293): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd62020ee0 a2=0 a3=0 items=0 ppid=3057 pid=3330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 78.920580] kauditd_printk_skb: 19 callbacks suppressed [ 78.920583] audit: type=1325 audit(1755046682.420:300): table=filter:97 family=2 entries=19 op=nft_register_rule pid=3341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 78.947490] audit: type=1300 audit(1755046682.420:300): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe429ef6a0 a2=0 a3=7ffe429ef68c items=0 ppid=3057 pid=3341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 79.010143] audit: type=1327 audit(1755046682.420:300): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 79.045551] audit: type=1325 audit(1755046682.502:301): table=nat:98 family=2 entries=12 op=nft_register_rule pid=3341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 79.063768] audit: type=1300 audit(1755046682.502:301): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe429ef6a0 a2=0 a3=0 items=0 ppid=3057 pid=3341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 79.090312] audit: type=1327 audit(1755046682.502:301): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 80.061577] audit: type=1325 audit(1755046683.568:302): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3464 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 80.067355] audit: type=1300 audit(1755046683.568:302): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe033b4620 a2=0 a3=7ffe033b460c items=0 ppid=3057 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.080708] audit: type=1327 audit(1755046683.568:302): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 80.086654] audit: type=1325 audit(1755046683.590:303): table=nat:100 family=2 entries=12 op=nft_register_rule pid=3464 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 90.489835] kauditd_printk_skb: 2 callbacks suppressed [ 90.489839] audit: type=1325 audit(1755046693.996:304): table=filter:101 family=2 entries=21 op=nft_register_rule pid=4024 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 90.501417] audit: type=1300 audit(1755046693.996:304): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd75750cd0 a2=0 a3=7ffd75750cbc items=0 ppid=3057 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 90.516604] audit: type=1327 audit(1755046693.996:304): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 90.523270] audit: type=1325 audit(1755046694.022:305): table=nat:102 family=2 entries=19 op=nft_register_chain pid=4024 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 90.530284] audit: type=1300 audit(1755046694.022:305): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd75750cd0 a2=0 a3=7ffd75750cbc items=0 ppid=3057 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 90.544436] audit: type=1327 audit(1755046694.022:305): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.184401] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 96.187822] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 97.974110] audit: type=1400 audit(1755046701.484:306): avc: denied { write } for pid=4161 comm="tee" name="fd" dev="proc" ino=25975 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 97.983767] audit: type=1300 audit(1755046701.484:306): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc6ba687e7 a2=241 a3=1b6 items=1 ppid=4126 pid=4161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.996775] audit: type=1307 audit(1755046701.484:306): cwd="/etc/service/enabled/cni/log" [ 98.000808] audit: type=1302 audit(1755046701.484:306): item=0 name="/dev/fd/63" inode=25171 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 98.010249] audit: type=1327 audit(1755046701.484:306): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 98.019018] audit: type=1400 audit(1755046701.504:307): avc: denied { write } for pid=4153 comm="tee" name="fd" dev="proc" ino=25183 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 98.030350] audit: type=1300 audit(1755046701.504:307): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc6997e7e6 a2=241 a3=1b6 items=1 ppid=4128 pid=4153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.044287] audit: type=1307 audit(1755046701.504:307): cwd="/etc/service/enabled/bird/log" [ 98.048133] audit: type=1302 audit(1755046701.504:307): item=0 name="/dev/fd/63" inode=25162 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 98.059416] audit: type=1327 audit(1755046701.504:307): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 98.853548] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 98.859587] IPv6: ADDRCONF(NETDEV_CHANGE): cali32ade90086c: link becomes ready This is ip-172-31-30-94 (Linux x86_64 5.15.189-flatcar) 00:58:23 SSH host key: SHA256:JawrcqmkafF7TQ+oTPT1EztmEpvT1L5YIprsJTzGa54 (ED25519) SSH host key: SHA256:QRwnnU7QVt5UYr7IFmtdTAVv/hu+HNzjA3EYb7vul7g (ECDSA) SSH host key: SHA256:4tZ72U8wo05aY4xk0Cgst0PWbdqOQkLEtzV5ed87YcY (RSA) eth0: 172.31.30.94 fe80::4c2:16ff:fe50:6e63 ip-172-31-30-94 login: This is ip-172-31-30-94 (Linux x86_64 5.15.189-flatcar) 00:58:24 SSH host key: SHA256:JawrcqmkafF7TQ+oTPT1EztmEpvT1L5YIprsJTzGa54 (ED25519) SSH host key: SHA256:QRwnnU7QVt5UYr7IFmtdTAVv/hu+HNzjA3EYb7vul7g (ECDSA) SSH host key: SHA256:4tZ72U8wo05aY4xk0Cgst0PWbdqOQkLEtzV5ed87YcY (RSA) eth0: 172.31.30.94 fe80::4c2:16ff:fe50:6e63 ip-172-31-30-94 login: [ 102.054591] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 102.056099] IPv6: ADDRCONF(NETDEV_CHANGE): caliba24f05c0f2: link becomes ready This is ip-172-31-30-94 (Linux x86_64 5.15.189-flatcar) 00:58:25 SSH host key: SHA256:JawrcqmkafF7TQ+oTPT1EztmEpvT1L5YIprsJTzGa54 (ED25519) SSH host key: SHA256:QRwnnU7QVt5UYr7IFmtdTAVv/hu+HNzjA3EYb7vul7g (ECDSA) SSH host key: SHA256:4tZ72U8wo05aY4xk0Cgst0PWbdqOQkLEtzV5ed87YcY (RSA) eth0: 172.31.30.94 fe80::4c2:16ff:fe50:6e63 ip-172-31-30-94 login: [ 102.227716] IPv6: ADDRCONF(NETDEV_CHANGE): cali186a1b9dd60: link becomes ready [ 102.927079] IPv6: ADDRCONF(NETDEV_CHANGE): calia7ee529536f: link becomes ready [ 103.058505] kauditd_printk_skb: 553 callbacks suppressed [ 103.058508] audit: type=1325 audit(1755046706.571:417): table=filter:109 family=2 entries=52 op=nft_register_chain pid=4727 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 103.075161] audit: type=1300 audit(1755046706.571:417): arch=c000003e syscall=46 success=yes exit=27556 a0=3 a1=7ffe81f04660 a2=0 a3=7ffe81f0464c items=0 ppid=4137 pid=4727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.085485] audit: type=1327 audit(1755046706.571:417): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 103.589764] audit: type=1130 audit(1755046707.103:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.94:22-147.75.109.163:49258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 103.890036] audit: type=1101 audit(1755046707.403:419): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 103.900321] audit: type=1103 audit(1755046707.413:420): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 103.924170] audit: type=1006 audit(1755046707.424:421): pid=4773 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 103.928691] audit: type=1300 audit(1755046707.424:421): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd86946b0 a2=3 a3=0 items=0 ppid=1 pid=4773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.941952] audit: type=1327 audit(1755046707.424:421): proctitle=737368643A20636F7265205B707269765D [ 103.998979] audit: type=1105 audit(1755046707.512:422): pid=4773 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 104.262070] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 104.263842] IPv6: ADDRCONF(NETDEV_CHANGE): cali43b85941b08: link becomes ready [ 104.419410] IPv6: ADDRCONF(NETDEV_CHANGE): calid610af83008: link becomes ready This is ip-172-31-30-94 (Linux x86_64 5.15.189-flatcar) 00:58:28 SSH host key: SHA256:JawrcqmkafF7TQ+oTPT1EztmEpvT1L5YIprsJTzGa54 (ED25519) SSH host key: SHA256:QRwnnU7QVt5UYr7IFmtdTAVv/hu+HNzjA3EYb7vul7g (ECDSA) SSH host key: SHA256:4tZ72U8wo05aY4xk0Cgst0PWbdqOQkLEtzV5ed87YcY (RSA) eth0: 172.31.30.94 fe80::4c2:16ff:fe50:6e63 ip-172-31-30-94 login: This is ip-172-31-30-94 (Linux x86_64 5.15.189-flatcar) 00:58:29 SSH host key: SHA256:JawrcqmkafF7TQ+oTPT1EztmEpvT1L5YIprsJTzGa54 (ED25519) SSH host key: SHA256:QRwnnU7QVt5UYr7IFmtdTAVv/hu+HNzjA3EYb7vul7g (ECDSA) SSH host key: SHA256:4tZ72U8wo05aY4xk0Cgst0PWbdqOQkLEtzV5ed87YcY (RSA) eth0: 172.31.30.94 fe80::4c2:16ff:fe50:6e63 ip-172-31-30-94 login: [ 105.663387] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 105.665076] IPv6: ADDRCONF(NETDEV_CHANGE): calie3992ded3c3: link becomes ready [ 105.851619] IPv6: ADDRCONF(NETDEV_CHANGE): calib2dfe653089: link becomes ready This is ip-172-31-30-94 (Linux x86_64 5.15.189-flatcar) 00:58:30 SSH host key: SHA256:JawrcqmkafF7TQ+oTPT1EztmEpvT1L5YIprsJTzGa54 (ED25519) SSH host key: SHA256:QRwnnU7QVt5UYr7IFmtdTAVv/hu+HNzjA3EYb7vul7g (ECDSA) SSH host key: SHA256:4tZ72U8wo05aY4xk0Cgst0PWbdqOQkLEtzV5ed87YcY (RSA) eth0: 172.31.30.94 fe80::4c2:16ff:fe50:6e63 ip-172-31-30-94 login: This is ip-172-31-30-94 (Linux x86_64 5.15.189-flatcar) 00:58:31 SSH host key: SHA256:JawrcqmkafF7TQ+oTPT1EztmEpvT1L5YIprsJTzGa54 (ED25519) SSH host key: SHA256:QRwnnU7QVt5UYr7IFmtdTAVv/hu+HNzjA3EYb7vul7g (ECDSA) SSH host key: SHA256:4tZ72U8wo05aY4xk0Cgst0PWbdqOQkLEtzV5ed87YcY (RSA) eth0: 172.31.30.94 fe80::4c2:16ff:fe50:6e63 ip-172-31-30-94 login: [ 108.367944] kauditd_printk_skb: 40 callbacks suppressed [ 108.367948] audit: type=1325 audit(1755046711.882:439): table=filter:122 family=2 entries=12 op=nft_register_rule pid=5308 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 108.373436] audit: type=1300 audit(1755046711.882:439): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe8dbb5360 a2=0 a3=7ffe8dbb534c items=0 ppid=3057 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 108.383533] audit: type=1327 audit(1755046711.882:439): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 108.392242] audit: type=1325 audit(1755046711.904:440): table=nat:123 family=2 entries=22 op=nft_register_rule pid=5308 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 108.396838] audit: type=1300 audit(1755046711.904:440): arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe8dbb5360 a2=0 a3=7ffe8dbb534c items=0 ppid=3057 pid=5308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 108.405307] audit: type=1327 audit(1755046711.904:440): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-30-94 (Linux x86_64 5.15.189-flatcar) 00:58:32 SSH host key: SHA256:JawrcqmkafF7TQ+oTPT1EztmEpvT1L5YIprsJTzGa54 (ED25519) SSH host key: SHA256:QRwnnU7QVt5UYr7IFmtdTAVv/hu+HNzjA3EYb7vul7g (ECDSA) SSH host key: SHA256:4tZ72U8wo05aY4xk0Cgst0PWbdqOQkLEtzV5ed87YcY (RSA) eth0: 172.31.30.94 fe80::4c2:16ff:fe50:6e63 ip-172-31-30-94 login: [ 110.321304] audit: type=1130 audit(1755046713.836:441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.94:22-147.75.109.163:45190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 110.722917] audit: type=1325 audit(1755046714.238:442): table=filter:124 family=2 entries=11 op=nft_register_rule pid=5318 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.727184] audit: type=1300 audit(1755046714.238:442): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff996b9230 a2=0 a3=7fff996b921c items=0 ppid=3057 pid=5318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.740696] audit: type=1327 audit(1755046714.238:442): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 117.067169] kauditd_printk_skb: 25 callbacks suppressed [ 117.067171] audit: type=1325 audit(1755046720.583:456): table=filter:130 family=2 entries=10 op=nft_register_rule pid=5469 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 117.073975] audit: type=1300 audit(1755046720.583:456): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffcf6d06f60 a2=0 a3=7ffcf6d06f4c items=0 ppid=3057 pid=5469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.085227] audit: type=1327 audit(1755046720.583:456): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 117.099606] audit: type=1325 audit(1755046720.611:457): table=nat:131 family=2 entries=24 op=nft_register_rule pid=5469 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 117.108292] audit: type=1300 audit(1755046720.611:457): arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffcf6d06f60 a2=0 a3=7ffcf6d06f4c items=0 ppid=3057 pid=5469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.121303] audit: type=1327 audit(1755046720.611:457): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 117.477665] audit: type=1130 audit(1755046720.994:458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.94:22-147.75.109.163:34370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 117.849723] audit: type=1101 audit(1755046721.366:459): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 117.875963] audit: type=1325 audit(1755046721.382:460): table=filter:132 family=2 entries=10 op=nft_register_rule pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 117.892120] audit: type=1103 audit(1755046721.386:461): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 123.058262] kauditd_printk_skb: 21 callbacks suppressed [ 123.058265] audit: type=1130 audit(1755046726.575:475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.94:22-147.75.109.163:34396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 123.075541] audit: type=1106 audit(1755046726.591:476): pid=5651 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 123.089848] audit: type=1104 audit(1755046726.594:477): pid=5651 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 123.110412] audit: type=1131 audit(1755046726.596:478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.94:22-147.75.109.163:34386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 123.441754] audit: type=1101 audit(1755046726.959:479): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 123.466304] audit: type=1103 audit(1755046726.974:480): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 123.480287] audit: type=1006 audit(1755046726.974:481): pid=5748 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 123.489204] audit: type=1300 audit(1755046726.974:481): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9d20b1f0 a2=3 a3=0 items=0 ppid=1 pid=5748 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.501940] audit: type=1327 audit(1755046726.974:481): proctitle=737368643A20636F7265205B707269765D [ 123.546055] audit: type=1105 audit(1755046727.062:482): pid=5748 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 131.323020] kauditd_printk_skb: 10 callbacks suppressed [ 131.323031] audit: type=1130 audit(1755046734.841:489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.94:22-147.75.109.163:39716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 131.599410] audit: type=1101 audit(1755046735.117:490): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 131.609642] audit: type=1103 audit(1755046735.127:491): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 131.620166] audit: type=1006 audit(1755046735.127:492): pid=6084 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 131.627393] audit: type=1300 audit(1755046735.127:492): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3536a3e0 a2=3 a3=0 items=0 ppid=1 pid=6084 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.638421] audit: type=1327 audit(1755046735.127:492): proctitle=737368643A20636F7265205B707269765D [ 131.679269] audit: type=1105 audit(1755046735.196:493): pid=6084 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 131.689784] audit: type=1103 audit(1755046735.206:494): pid=6087 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 132.769111] audit: type=1106 audit(1755046736.287:495): pid=6084 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 132.780885] audit: type=1104 audit(1755046736.297:496): pid=6084 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 137.534355] kauditd_printk_skb: 20 callbacks suppressed [ 137.534358] audit: type=1106 audit(1755046741.052:513): pid=6107 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 137.602877] audit: type=1104 audit(1755046741.069:514): pid=6107 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 137.620830] audit: type=1130 audit(1755046741.074:515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.94:22-147.75.109.163:56478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 137.630406] audit: type=1131 audit(1755046741.077:516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.30.94:22-147.75.109.163:39744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 137.918567] audit: type=1325 audit(1755046741.436:517): table=filter:136 family=2 entries=22 op=nft_register_rule pid=6129 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 137.927501] audit: type=1300 audit(1755046741.436:517): arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc8d840470 a2=0 a3=7ffc8d84045c items=0 ppid=3057 pid=6129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.943564] audit: type=1327 audit(1755046741.436:517): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 137.960158] audit: type=1325 audit(1755046741.477:518): table=nat:137 family=2 entries=24 op=nft_register_rule pid=6129 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 137.972971] audit: type=1300 audit(1755046741.477:518): arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffc8d840470 a2=0 a3=0 items=0 ppid=3057 pid=6129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.037211] audit: type=1327 audit(1755046741.477:518): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 144.961138] kauditd_printk_skb: 13 callbacks suppressed [ 144.961141] audit: type=1325 audit(1755046748.479:526): table=filter:140 family=2 entries=22 op=nft_register_rule pid=6146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 144.970324] audit: type=1300 audit(1755046748.479:526): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe171282d0 a2=0 a3=7ffe171282bc items=0 ppid=3057 pid=6146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.983170] audit: type=1327 audit(1755046748.479:526): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 144.993939] audit: type=1325 audit(1755046748.512:527): table=nat:141 family=2 entries=108 op=nft_register_chain pid=6146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 145.001327] audit: type=1300 audit(1755046748.512:527): arch=c000003e syscall=46 success=yes exit=50220 a0=3 a1=7ffe171282d0 a2=0 a3=7ffe171282bc items=0 ppid=3057 pid=6146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.015365] audit: type=1327 audit(1755046748.512:527): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 146.323935] audit: type=1106 audit(1755046749.843:528): pid=6125 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 146.338000] audit: type=1104 audit(1755046749.856:529): pid=6125 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 146.356841] audit: type=1130 audit(1755046749.866:530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.30.94:22-147.75.109.163:47874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 146.377624] audit: type=1131 audit(1755046749.872:531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.94:22-147.75.109.163:56478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.559219] kauditd_printk_skb: 10 callbacks suppressed [ 150.559221] audit: type=1325 audit(1755046754.078:540): table=filter:142 family=2 entries=9 op=nft_register_rule pid=6220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.566666] audit: type=1300 audit(1755046754.078:540): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc959ad250 a2=0 a3=7ffc959ad23c items=0 ppid=3057 pid=6220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.576995] audit: type=1327 audit(1755046754.078:540): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 150.585421] audit: type=1325 audit(1755046754.104:541): table=nat:143 family=2 entries=55 op=nft_register_chain pid=6220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.590696] audit: type=1300 audit(1755046754.104:541): arch=c000003e syscall=46 success=yes exit=20100 a0=3 a1=7ffc959ad250 a2=0 a3=7ffc959ad23c items=0 ppid=3057 pid=6220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.602885] audit: type=1327 audit(1755046754.104:541): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 153.685179] audit: type=1130 audit(1755046757.204:542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.94:22-147.75.109.163:47878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 154.017992] audit: type=1101 audit(1755046757.537:543): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 154.029065] audit: type=1103 audit(1755046757.548:544): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 154.040505] audit: type=1006 audit(1755046757.549:545): pid=6223 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 156.396687] kauditd_printk_skb: 4 callbacks suppressed [ 156.396690] audit: type=1106 audit(1755046759.915:548): pid=6223 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.408586] audit: type=1104 audit(1755046759.915:549): pid=6223 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.418177] audit: type=1131 audit(1755046759.918:550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.94:22-147.75.109.163:47878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.451433] audit: type=1130 audit(1755046764.970:551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.30.94:22-147.75.109.163:36062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.812694] audit: type=1101 audit(1755046765.331:552): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 161.823885] audit: type=1103 audit(1755046765.341:553): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 161.833267] audit: type=1006 audit(1755046765.342:554): pid=6256 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 161.838453] audit: type=1300 audit(1755046765.342:554): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffceac88bb0 a2=3 a3=0 items=0 ppid=1 pid=6256 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.848006] audit: type=1327 audit(1755046765.342:554): proctitle=737368643A20636F7265205B707269765D [ 161.896536] audit: type=1105 audit(1755046765.415:555): pid=6256 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 161.929433] audit: type=1103 audit(1755046765.430:556): pid=6259 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 163.008797] audit: type=1106 audit(1755046766.526:557): pid=6256 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 163.023648] audit: type=1104 audit(1755046766.526:558): pid=6256 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.054221] kauditd_printk_skb: 1 callbacks suppressed [ 168.054224] audit: type=1130 audit(1755046771.573:560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.94:22-147.75.109.163:33340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.374503] audit: type=1101 audit(1755046771.893:561): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.391610] audit: type=1103 audit(1755046771.906:562): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.413621] audit: type=1006 audit(1755046771.906:563): pid=6274 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 168.443092] audit: type=1300 audit(1755046771.906:563): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd53fd5d90 a2=3 a3=0 items=0 ppid=1 pid=6274 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.469613] audit: type=1327 audit(1755046771.906:563): proctitle=737368643A20636F7265205B707269765D [ 168.481620] audit: type=1105 audit(1755046771.959:564): pid=6274 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.511627] audit: type=1103 audit(1755046771.961:565): pid=6277 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 169.689618] audit: type=1106 audit(1755046773.208:566): pid=6274 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 169.711437] audit: type=1104 audit(1755046773.209:567): pid=6274 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 174.741753] kauditd_printk_skb: 1 callbacks suppressed [ 174.741756] audit: type=1130 audit(1755046778.261:569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.94:22-147.75.109.163:54274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.069268] audit: type=1101 audit(1755046778.587:570): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 175.093495] audit: type=1103 audit(1755046778.602:571): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 175.114821] audit: type=1006 audit(1755046778.602:572): pid=6287 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 175.128088] audit: type=1300 audit(1755046778.602:572): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd06e01830 a2=3 a3=0 items=0 ppid=1 pid=6287 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.172495] audit: type=1327 audit(1755046778.602:572): proctitle=737368643A20636F7265205B707269765D [ 175.182351] audit: type=1105 audit(1755046778.646:573): pid=6287 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 175.192624] audit: type=1103 audit(1755046778.663:574): pid=6290 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 176.441550] audit: type=1106 audit(1755046779.961:575): pid=6287 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 176.458702] audit: type=1104 audit(1755046779.961:576): pid=6287 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success'